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DETAILED ACTION 
Response to Arguments 

1 . Applicant's arguments filed 08/07/2009 have been fiiUy considered but they are not 
persuasive. 

Applicant's amended claim now recites the limitation "wherein the at least one sensitive 
file continues to be stored on the computing system". The applicant argues that McBrearty 
destroys the file if the access attempt to the file is not on an authorized connection list. Examiner 
agrees that McBrearty destroys the file which meets applicant's limitation in claim 1 of 
"performing an access prevention task". The file is destroyed because McBrearty maintains an 
exact copy of the file and restores the file from the copy after destroying or deleting the original 
file. 

The secondary reference (Vainstein US-6889210) was used to teach the other access 
prevention tasks of encrypting the file or locking the file as recited in claim 6 with the rational 
that McBrearty employing such access prevention technique (encrypting or locking the file) will 
continue to store the file on the computing system (instead of maintaining a backup copy of the 
file) by encrypting or locking the file should an unauthorized connection be made to the file. So, 
the limitation in amended claim 1 is already addressed by the secondary reference because 
encrj^ting or locking the file maintains the file on the system and does not destroy the file. 
Claim Rejections - 35 USC § 103 

2. The following is a quotation of 35 U.S. C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
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having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

3. Claims 1-3 and 5-20 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
McBrearty et al. (US-20020129152), and further in view of Vainstein (US-6889210). 
a. Referring to claim 1. 13. 15 and 18: 

Regarding claim 1, McBrearty teaches in a computing device, a method for protecting 

sensitive files from unauthorized access, comprising: 

detecting a connection of the computing device to an electronic device; accessing an authorized 
connection list (See McBrearty, Para 21 teaches a connection a device to a web resource and 
accessing an authorized hst to determine if the user or connection is authorized); 
determining whether the connection is identified in the authorized connection list (Para 21 
teaches comparing the connection to an authorized list to determine if it is an authorized 
connection); and 

if the connection is not identified in the authorized connection list; accessing sensitive file 
information which identifies at least one sensitive file stored on the computing device (See 
McBrearty, Para 21-22 teaches if the user is not authorized to access a sensitive file stored on the 
server); and 

preventing access to the at least one sensitive file identified by the sensitive file information by 
performing an access prevention task after the connection is not identified in the authorized 
connection list (See McBrearty, Para 21-22 teaches a protection process of preventing access to 
the sensitive file by performing an access protection task such as deleting the file or making it 
inaccessible)^ 
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McBrearty teaches maintaining a copy of the sensitive file on the computing system but 
does not teach maintaining the original sensitive file on the computing system by encrypting or 
locking the file as an access prevention task. 

However, Vainstein teaches a method of maintaining a sensitive file on a computing 
system and encrypting, locking or moving the file to a protected storage to prevent access to the 
file when an unauthorized user seeks access to the file (See Vainstein, Col 5, Line 63-67 teaches 
protecting a sensitive file by encryption or locking the file with a file key or writing it into a 
protected storage). 

Therefore, it would have been obvious to modify McBrearty' s access prevention task to 
also include an option of encrypting the file or locking the file or moving the file to a protected 
storage (instead of deleting the file) to protect and prevent access to the file while it is stored on 
the computing device thereby making the system more efficient by eliminating the need to 
maintain backups of the sensitive file, 
a. Referrins to claim 2. 16 and 19: 

Regarding claim 2, the combination of McBrearty and Vainstein teaches the method of 
claim 1, wherein if the connection is not identified in the authorized connection list the method 
further comprises: detecting termination of the connection; and if the computing device does not 
have any other unauthorized connections, restoring access to the at least one sensitive file 
identified by the sensitive file information (See McBrearty, Para 25 teaches restoring the file 
after the protection process), 
a. Referrins to claim 3: 
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Regarding claim 3, the combination of McBrearty and Vainstein teaches the method of 
claim 1, wherein the connection occurs via a computer network (See McBrearty, Para 16-18 
teaches a computer network connection), 
a. Referring to claim 5: 

Regarding claim 5, the combination of McBrearty and Vainstein teaches the method of 
claim I, wherein the connection is a direct connection (See McBrearty, Para 16 and 18 teaches a 
direct a connection of a host to a server), 
a. Referring to claim 6-8. 1 7 and 20: 

Regarding claim 5, the combination of McBrearty and Vainstein teaches the method of 
claim 1, wherein the access prevention task comprises locking the at least one sensitive file, 
encrypting the at least one sensitive file or moving the at least one sensitive file to a host- 
protected area of the storage device (See Vainstein, Col 5, Line 63-67 teaches protecting a 
sensitive file by encryption or locking the file with a file key or writing it into a protected 
storage) 

a. Referrins to claim 9: 

Regarding claim 9, the combination of McBrearty and Vainstein teaches the method of 
claim 1 , wherein the sensitive file information is a reference to a directory in which the at least 
one sensitive file is stored (See Vainstein, Col 7, Line 17-31 teaches a header file structure linked 
to the protective file which references or points to the location of the protected file), 
a. Referrins to claim 10: 
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Regarding claim 10, the combination of McBrearty and Vainstein teaches the method of 
claim 1, wherein the sensitive file information is a list of the at least one sensitive file (See 
McBrearty, Para 21 teaches parameters relating to the protected file), 
a. Referring to claim 11: 

Regarding claim 11, the combination of McBrearty and Vainstein teaches the method of 
claim 1, wherein the authorized connection Ust comprises a list of at least one authorized network 
(See McBrearty, Para 21 teaches a list of authorized users on a network), 
a. Referring to claim 12: 

Regarding claim 12, the combination of McBrearty and Vainstein teaches the method of 
claim 1, wherein the authorized connection hst comprises a list of at least one authorized 
connection type (See McBrearty, Para 21 teaches a list of authorized connections), 
a. Referring to claim 14: 

Regarding claim 14, the combination of McBrearty and Vainstein teaches the method of 
claim 13, further comprising: providing the authorized connection list; providing the sensitive 
file information; and transmitting the authorized connection list and the sensitive file information 
to the plurality of computing devices via the enterprise network (See McBrearty, Para 21-23 
teaches providing the authorized connection list and parameters relating to protected files to the 
server computers storing the sensitive files). 

4. Claim 4 is rejected under 35 U.S.C. 103(a) as being unpatentable over McBrearty et al. 
(US-20020129152), and fiirther in view of Elliott et al. (US-20030056095). 
a. Referrins to claim 4: 
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Regarding claim 4, the combination of McBrearty and Vainstein teaches the method of 
claim 3. 

McBrearty does not teach the connection network as a wireless network and the device as 
a mobile device. 

However, Elliott teaches a method of securing encrypted files irom unauthorized access 
where the connection is made through a wireless network and by a mobile device (See Elliott, 
Para 22) 

Therefore, it would have been obvious to modify McBrearty's method and invention to 

include support for a wireless network and a mobile device as the client as taught by Elliott for 
the purpose of improving the system by incorporating wireless devices as client device making 
request for access to files on the sever. 

Conclusion 

5. Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event. 
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however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to IZUNNA OKEKE whose telephone number is (571)270-3854. 
The examiner can normally be reached on 9:00am - 5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on (571) 272-3799. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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